$first should not cause e_notice errors, but it still can be abused